LeashIndex Get the report

Index / messaging

Robyn — Gasless Cross-Chain for AI Agents

io-github-ox31461-robyn declares 87 capabilities across 87 tools, with 3 critical issues.

100/100 exposureHigh exposure

Manifest recorded 2026-10-11 from tools/list on https://api.anygas.xyz/mcp, published in the official MCP registry as io.github.ox31461/robyn 1.0.5. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 87 tools

87 of 87 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

critical · irreversible-uncapped · 14 of 87 tools

14 tools are classified as irreversible and declare no limit.

critical · uncapped-spend · 2 of 87 tools

2 tools are classified as moving money and declare no dollar limit. A cap on the number of payments does not bound their amount.

high · no-expiry · All 87 tools

87 of 87 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 87 tools

87 of 87 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

high · uncapped-write · 39 of 87 tools

39 tools can modify data and declare no limit.

low · uncapped-read · 34 of 87 tools

34 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
robyn_privacy_postureread inferred
robyn_receipt_deliverwrite assumed
robyn_receipt_verifyread inferred
robyn_meshread inferred
robyn_quotewrite inferred
robyn_settlewrite assumed
robyn_attestationread inferred
robyn_preflightwrite assumed
robyn_vip_statusread inferred
robyn_route_statusread inferred
robyn_cross_chainread inferred
robyn_preparewrite assumed
robyn_sandbox_dowrite assumed
robyn_submitwrite assumed
robyn_netting_inforead inferred
robyn_netting_accountwrite assumed
robyn_netting_previewread inferred
robyn_netting_statementwrite inferred
robyn_netting_reservessend inferred
robyn_netting_enroll_payloadread inferred
robyn_netting_transfer_payloadwrite inferred
robyn_counterparty_checkwrite assumed
robyn_preflight_fullwrite assumed
robyn_integration_lintsend inferred
robyn_recipeswrite assumed
robyn_changelogwrite assumed
robyn_errorswrite assumed
robyn_verify_outcomeread inferred
robyn_planread inferred
robyn_spend_statementwrite inferred
robyn_fee_forensicswrite inferred
robyn_delivery_statsread inferred
robyn_mandate_eventswrite assumed
robyn_mandate_listread inferred
robyn_mandate_cosign_requestwrite inferred
robyn_mandate_certificateread inferred
robyn_mandate_checkread inferred
robyn_mandate_statusread inferred
robyn_improve_costwrite assumed
robyn_why_this_routeread inferred
robyn_capability_snapshotwrite assumed
robyn_evidence_bundlewrite inferred
robyn_payment_request_preparepay inferred
robyn_payment_request_verifyread inferred
robyn_payment_request_settlementpay inferred
robyn_refusal_verifyread inferred
robyn_7702_delegatewrite assumed
robyn_7702_checkread inferred
robyn_sponsor_7702write inferred
robyn_yield_accountwrite assumed
robyn_yield_quoteread inferred
robyn_yield_spendwrite assumed
robyn_message_inforead inferred
robyn_message_directorysend inferred
robyn_message_mailbox_ofsend inferred
robyn_message_sendsend inferred
robyn_message_feedsend inferred
robyn_message_publish_mailboxsend inferred
robyn_plus_inforead inferred
robyn_plus_invoicewrite inferred
robyn_plus_invoice_statusread inferred
robyn_plus_trialwrite assumed
robyn_plus_claimwrite assumed
robyn_message_anchor_proofsend inferred
robyn_message_erasuresend inferred
null_ecosystemwrite assumed
null_names_quotewrite assumed
null_names_marketwrite assumed
null_prekeys_fetchread inferred
null_prekeys_publishsend inferred
null_balanceread inferred
null_notarizewrite assumed
null_prov_issuerread inferred
null_prov_mintwrite inferred
null_login_verifyread inferred
null_witness_headwrite assumed
null_witness_rangewrite assumed
null_transparencywrite assumed
null_capsule_canceldelete inferred
null_calls_inforead inferred
null_void_descriptorread inferred
null_void_directorywrite assumed
null_void_publishsend inferred
null_market_listingsread inferred
null_market_listread inferred
null_market_delistwrite assumed
null_agent_guideread inferred
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.